HNHacker News
TopNewBestAskShowJobs

fps

892 karma · joined November 27, 2010

submissionscomments
fps··on Toyota’s Prius Pays Price for Cheap Gasoline
a 10 year old prius, which originally sold for $21K, is worth a little over $5K today. a 10 year old Tacoma, which originally sold for $22K, is worth just under $13K today. Conservative design was the better buy.
fps··on Toyota’s Prius Pays Price for Cheap Gasoline
Gas in my area has been around $2/gallon for a few years now. (https://blog.gasbuddy.com/Retail_Price_Chart.aspx) The current price right now in Boston is $1.91.
fps··on How to steal a developer's local database
because some people set up services on internal/private networks, and split horizon DNS is a pain to set up.

I typically tell people if they can't connect to services on our VPN, to make sure they're using google's DNS servers because they don't protect against DNS rebinding "attacks."

fps··on More, less, and a story of typical Unix fossilization
The UNIX philosophy of "do one thing, well" and "write many programs that work together" is contrary to powershell's idea of having all the tools you need as built-ins to your shell. The minute you need something that the "one development team" hadn't thought of, or decided wasn't important enough to ship, you have to either port it to powershell as a plugin or write something more complex to handle your workflow. For all it's cruft and baggage, the fact that there's not "one way to do things" and is continually expandable is part of what endears UNIX to it's users.
fps··on AT&T, Apple, Google to work on 'robocall' crackdown
I get them all the time on my Google Voice line, although that number originated on Cingular and was ported twice before landing on Google. I get about two a day from people mostly asking me to change my home electricity provider and political surveys. I actually shut off incoming voice calls on my main phone number through google voice, because it's at least 75% junk and the 25% I care about will leave a voicemail and I can call them back.
fps··on Uber’s First Self-Driving Fleet Arrives in Pittsburgh This Month
Drivers ed instructors, which is basically what supervising a self driving car is, are $14/hour average: http://www.payscale.com/research/US/Job=Driving_Instructor/H... I think this is higher than what uber is paying now.
fps··on DistroWatch Ubuntu Phone review
The latest version of the play store identifies apps that show ads or have in-app purchases.

https://files.derf.us/Screenshot_20160801-105001.png

fps··on Employee benefits at Basecamp
Yes, school is also closed during the summer, but kids have special summer arrangements, either "camps" or daycare, or staying home with a relative.

Kids in the US typically go to school 180 days a year, and so they're off about 80 week days every year.

fps··on Employee benefits at Basecamp
I work in the US and get 4 weeks of vacation a year, but I wouldn't take it all at once in the summer. My kids are in school and schools close for 3 weeks during the normal school year - one between Christmas and New Years, one in February and one in April. The Christmas to New Years week coincides with 4 of the days my office is closed (Christmas eve and day, New years eve and day), so I can take 2 to 3 days off and be home for that stretch. That leaves about a week and a half in the summer for a summer vacation. If you're taking 4 weeks in the summer, do you not take time at all the rest of the year? Do schools in your country not have vacations?
fps··on [dead]
SSH config supports lots of esoteric options, like setting non-standards ports, usernames and specialized routing (using Proxycommand options).

Three issues, for me, with adding hosts to DNS:

1) I work from several networks - work, home, tethered. I only control the DNS zone that is set up as my default DNS search domain on one of those networks.

2) I work on hosts in several external networks - they shouldn't all be in the same DNS search domain.

3) I work primarily with cloud hosted, ephemeral servers. Cattle, not pets. Right now I have a tool that adds hosts from my EC2 accounts to my ssh config file (https://github.com/fredsmith/aws-ssh-config.)

I also have solved this problem using 21 lines of bash in my bashrc. (https://github.com/fredsmith/dotfiles/blob/master/bash/dsh) Mine doesn't have quite the level of polish of yours, but since it uses the system ssh binary, it handles special ssh configurations and seamlessly uses ssh-agent. I've used this on hundreds of hosts simultaneously, and it executes in parallel very quickly.

    [derf@pan][12:01:01]-[~] $ dsh smith.bz uptime
    pandora.smith.bz: 12:01:09 up 38 days, 2:40, 0 users, load average: 0.30, 0.23, 0.23
    dione.smith.bz: 12:01:11 up 42 days, 14:22, 2 users, load average: 0.00, 0.01, 0.05
    tethys.smith.bz: 12:01:11 up 23 days, 3:26, 1 user, load average: 0.00, 0.01, 0.05
    hyperion.smith.bz: 12:01:12 up 23 days, 3:01, 1 user, load average: 0.89, 0.87, 0.76
    io.smith.bz: 12:01:12 up 23 days, 3:26, 1 user, load average: 0.38, 0.73, 1.73
    janus.smith.bz: 12:01:12 up 31 days, 3 min, 1 user, load average: 0.37, 0.37, 0.28
    rhea.smith.bz: 12:01:12 up 42 days, 14:29, 2 users, load average: 0.03, 0.05, 0.07
fps··on [dead]
By implementing your own ssh, you appear to be ignoring lots of useful default ssh utilities, like ssh-agent and ~/.ssh/config eg.

    [derf@pan][09:06:20]-[~] $ orgalorg -o pandora -C uptime
    2016-07-25 09:06:28 [FATAL] can't create runner factory
    └─ can't read SSH key: '/Users/derf/.ssh/id_rsa'
       └─ can't read SSH key from file
          └─ open /Users/derf/.ssh/id_rsa: no such file or directory
    [derf@pan][09:06:28]-[~] $ orgalorg -p -o pandora -C uptime
    Password:
    2016-07-25 09:06:36  [WARN] still connecting to address after 2s: [derf@pandora:22]
    2016-07-25 09:06:44 [FATAL] acquiring global cluster lock failed
    └─ connection to 1 of 1 nodes failed
       └─ can't connect to nodes
          └─ can't connect to address: [derf@pandora:22]
             └─ dial tcp 18.60.0.124:22: i/o timeout
    [derf@pan][09:06:45]-[~] $ ssh pandora uptime
     09:06:49 up 37 days, 23:45,  0 users,  load average: 1.18, 0.70, 0.33
Is the assumption that I'm going to set up entries in /etc/hosts for all my systems, or add them to my network's DNS? What about ssh proxy hosts? The fact that you require a single ssh key to live in .ssh/id_rsa is going to make this useless for anyone that does any advanced usage of SSH.
fps··on Your Phone Has an FM Chip. So Why Can’t You Listen to the Radio?
if you buy an unsubsidized android device, the carriers don't get to tweak the functionality of the device. It doesn't have to be from an international seller - I bought my device directly from Motorola and just put my T-Mobile SIM card in it. However, it still comes with the US version of Android, which doesn't support the FM receiver.
fps··on Tech job listings are down 40% on several job boards
I don't know if it's particular to my city (Boston), but when I've worked with recruiters they've almost always led to interviews and offers. They have a good handle on what the hiring companies are looking for and how to position candidates to at least get a foot in the door. They're also annoyingly persistent and can dig into companies and bug the hiring manager directly, going around HR, which yields better results most of the time.

I wouldn't be so dismissive of recruiter spam, if you're really looking for responses back from companies.

fps··on Bluetooth LED bulbs
Zigbee hardware switch: $36 https://www.amazon.com/GE12722-Z-Wave-Wireless-Lighting-Cont... 7 inch touchscreen android tablet: $39 https://www.amazon.com/gp/product/B01CGSWYFM/

The zigbee switch also has a relay in it, which is the majority of the cost, but if you're controlling a bulb with a built-in receiver, you're not using that relay. There really aren't much cheaper zigbee, zwave, wifi or bluetooth wall switches.

fps··on Facebook Messenger begins testing end-to-end encryption using Signal Protocol
End to end means that your computer is the only one that can read your gmail email, because the key is stored on your computer and not in the cloud. The whole reason we all moved to webmail from pop3 is to have access to our mailboxes on any device. If you put the key in the cloud and make it decryptable by some user-known data (like a password), there's very little point in having the key - brute forcing a user's key becomes very simple. Also, any legitimate service provider is going to provide a backup way to "recover your password", which means they have a shortcut to decrypting your data. So you can have one or the other, not both. Either you have simple, easy access to your data from multiple devices, or you have secure end to end encryption.
fps··on California Hits the Brakes on High-Speed Rail
I've lived in New York or Boston my entire life, and travel from Boston to NY and back again about 6 times a year. I've only ever ridden on Amtrak once (from Albany to NY) and it was slow, uncomfortable and expensive. To drive from Boston to NY in a 15 mpg pickup truck costs about $50 in gas and tolls, and takes a little over 4 hours under normal traffic conditions. My car is comfortable and has all my stuff in it, and it costs the same if I travel by myself or with my family of 5. The same trip by high speed rail is 4 hours 11 minutes, and costs $200 per person, and I have to get to the train station early so I don't miss my train. HSR in the northeast corridor is terrible.
fps··on Facebook uses location to suggest new friends
linkedin's IP based tracking includes their website, and doesn't require you to share your location through the browser. They've been doing that for years. If you share a network gateway with someone, LinkedIn will suggest that person as a contact.
fps··on Why aren't PGP and SSH keys popular as a second factor for authentication?
Authenticator Plus[1] has an android wear view, but it goes into lockdown mode if your phone is offline. Luckily (but also insecurely) it also supports regularly backing up two factor codes to google drive with gpg encryption, for when you crack the digitizer on your phone and need to get a new phone.

   1: https://play.google.com/store/apps/details?id=com.mufri.authenticatorplus&hl=en
fps··on Contextual Identities on the Web
Firefox's clumsy profile support is the one thing that makes me keep switching back to chrome. I really prefer firefox sync to chrome's implementation, and some of firefox's tab organization tools are way better than chrome's. But I use many of the same webapps in my personal life as I do in my work life, and being able to run two profiles simultaneously, and start them up without having to launch firefox from the terminal every time, was difficult.

What they've implemented seems to be better than chrome's profiles, in that it's easier to create a new profile for a specific context (so I don't have to sort things into a "work" bucket and a "personal" bucket.) It will be interesting to see how the contexts interact with plugins.

fps··on OS X DNS cache reset script
When a company renames itself, everyone that works with that company needs to make changes. Financial records, password and account management, , internal documentation, integrations, etc all have to change. Plus, eduction on the change takes time. People who occasionally interact with the company are going to be confused for months afterwards. It's very rare that something positive comes out of the name change for existing customers. The same thing is likely for product renames - platform version detection in software, browser/OS categorization in analytics tools, documentation, etc. It just makes work for everyone involved.

And what's the point? MacOS X was a decent name, with good recognition and trust. If people were interested in understanding the back story to the name, they could, but the 'X' didn't scream '10' to people who weren't familiar with the history, so there wasn't a ton of confusion.

fps··on The Triboro: Transit plan for the NYC Boroughs
Yes, lots of tech jobs have migrated from 128 to the city over the 10 years that I've lived here. There are still a lot of jobs on 128, and those companies run shuttles from the city out to the offices for people who live in the city.
fps··on The Triboro: Transit plan for the NYC Boroughs
Anecdotally, the people I work with in Cambridge, who live in Boston, Cambridge, Somerville and Arlington own cars, but don't use them to get to work. The cars are for the weekends and vacations because there's a lot of leisure activities in the area that are out of reach of the T. I know a lot of people that don't ski and don't even dig their car out after the first big snowfall - They just let it sit from December until March.
fps··on Introducing unlimited private repositories
Ah, I didn't see that part of the announcement at all. That makes the new pricing much closer to what we were paying before. Thanks for pointing it out!
fps··on Introducing unlimited private repositories
mostly these reasons. We also want to make sure that code we open source is properly documented, has appropriate functional tests, and is useful outside of our organization. Our typical workflow is to build a POC, then an MVP, then build out documentation and unit tests.
fps··on Introducing unlimited private repositories
Network effects make github more valuable, to an open source organization, than self hosting or hosting on another provider. Almost everyone has a github account and asking users to sign up for another account is a significant barrier to contribute.
fps··on Introducing unlimited private repositories
the software is AGPLv3'd, and run by hundreds of educational organizations around the world. Those organizations typically contribute changes back via Github. Non-employees don't contribute to our private repositories. We gain quite a bit from maintaining a large open source community, but it's not "free labor."
fps··on Introducing unlimited private repositories
We have about 100 private repos at the moment, including internal tools, branding related components, infrastructure code and pre-release stuff that we're not developing in the open. We may just move those to AWS code commit, gitlab or gogs and switch back to a free org.
fps··on Introducing unlimited private repositories
I work for a non-profit open source organization that collaborates on github (https://github.com/edx/) We have lots of people who aren't employees, but have signed a contributor agreement with our organization and contribute changes to our software. Our bill will go up from $200/month to over $2000/month with this new pricing. We can afford it (it's still a small fraction of our AWS bill) but it will force us to look at other alternatives. Github's code review tools are already pretty mediocre compared to other tools like gerrit, and we've long since moved off of github issue tracking due to lack of features compared to JIRA.
fps··on Apple Stole My Music
> Oh there's a download all button too, but it does NOT return the original files.

It does return the original files.

Here are two files, one that got backed up off my phone by google photos, which I then downloaded from google drive, and one that I copied directly off my phone via USB:

   $ md5sum IMG_20160504_160057648_HDR*
    4bcb38a2e3869b4c769301c1664f5846  IMG_20160504_160057648_HDR (1).jpg
    4bcb38a2e3869b4c769301c1664f5846  IMG_20160504_160057648_HDR.jpg
The files are identical.
fps··on Apple Stole My Music
Google drive has a switch in the options to expose a "Google Photos" folder, which contains the original versions of all your uploaded google photos. You can then download these photos with any google drive client. The photos you download have identical MD5 sums to the photos you uploaded - they're completely untouched.
← PreviousPage 5 of 9Next →